A Robust Security Architecture Using Redundant Security Measures

"The objective of this proposal is to demonstrate the feasibility of a novel approach to software security based on a new software architecture. Traditional security models rely on a weak chain of logical assumptions for security. If one of thoseassumptions is broken, whether due to operator error, carelessness, hardware or software changes, or hardware failures, the entire security model collapses.The proposed software architecture is based on a component model to provide a wide range of coverage of possible intrusion points in a simple and uniform manner and to allow the isolation of individual code modules. This architecture uses redundantsecurity measures to reduce both the likelihood and impact of a security breach, particularly under sabotage, errors, or other unfavorable circumstances.Code modules in the proposed architecture are isolated from each other so that all communications occur through a message passing system. Isolating the modules in this manner provides stability, modularity, and allows fine-grain control over securitysince security modules can monitor all interactions between components. Multiple security modules can be used to provide redundant monitoring in case of security intrusions. The proposed software architecture is designed with redundant security measures on each point of possible intrusion, so that if a hardware failure, software modification, bug, or other unforeseen circumstance occurs that may a